Files
crowdsec-parserwhitelist-ho…/03-homeassistant-whitelist.yaml
2026-03-12 20:19:34 +01:00

47 lines
2.4 KiB
YAML

name: my/homeassistant-whitelist
description: "Whitelist Home Assistant requests from NPMplus logs"
filter: "evt.Meta.service == 'http' && evt.Meta.log_type in ['http_access-log', 'http_error-log']"
whitelist:
reason: "Home Assistant legitimate traffic"
expression:
- "evt.Meta.http_path startsWith '/api/websocket'"
- "evt.Meta.http_path startsWith '/api/states'"
- "evt.Meta.http_path startsWith '/api/services'"
- "evt.Meta.http_path startsWith '/api/config'"
- "evt.Meta.http_path startsWith '/api/history'"
- "evt.Meta.http_path startsWith '/api/logbook'"
- "evt.Meta.http_path startsWith '/api/template'"
- "evt.Meta.http_path startsWith '/api/events'"
- "evt.Meta.http_path startsWith '/api/webhook/'"
- "evt.Meta.http_path startsWith '/api/calendars'"
- "evt.Meta.http_path startsWith '/api/shopping_list'"
- "evt.Meta.http_path startsWith '/api/components'"
- "evt.Meta.http_path startsWith '/api/panels'"
- "evt.Meta.http_path startsWith '/api/error_log'"
- "evt.Meta.http_path startsWith '/api/discovery_info'"
- "evt.Meta.http_path startsWith '/api/onboarding'"
- "evt.Meta.http_path startsWith '/api/cloud'"
- "evt.Meta.http_path startsWith '/api/camera_proxy'"
- "evt.Meta.http_path startsWith '/api/media_player_proxy'"
- "evt.Meta.http_path startsWith '/api/tts_proxy'"
- "evt.Meta.http_path startsWith '/api/image'"
- "evt.Meta.http_path startsWith '/api/intent'"
- "evt.Meta.http_path startsWith '/api/conversation'"
- "evt.Meta.http_path startsWith '/api/core'"
- "evt.Meta.http_path startsWith '/api/hassio'"
- "evt.Meta.http_path startsWith '/auth/token'"
- "evt.Meta.http_path startsWith '/auth/authorize'"
- "evt.Meta.http_path startsWith '/auth/login_flow/'"
- "evt.Meta.http_path startsWith '/auth/providers'"
- "evt.Meta.http_path startsWith '/auth/sign_path'"
- "evt.Meta.http_path startsWith '/auth/long_lived_access_token'"
- "evt.Meta.http_path startsWith '/frontend_latest/'"
- "evt.Meta.http_path startsWith '/frontend_es5/'"
- "evt.Meta.http_path startsWith '/static/'"
- "evt.Meta.http_path startsWith '/hacsfiles/'"
- "evt.Meta.http_path startsWith '/local/'"
- "evt.Meta.http_path startsWith '/hassio/'"
- "evt.Meta.http_path startsWith '/lovelace'"
- "evt.Meta.http_path == '/manifest.json'"
- "evt.Meta.http_path == '/service_worker.js'"